
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer
File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer (raw, json)
Hash identifier: hWw5Z6JsQW4wSR7IkAd9y0ZFbUn5kvc9Ec8k+zVlZdk=
Subject key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 540516E678B896B4FCBC67877688D2E47D171938
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 06:38:49 +0000
Certificate not after: Fri 28 May 2027 06:43:49 +0000
Subordinate resources: IP: 103.186.4.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:05:16:e6:78:b8:96:b4:fc:bc:67:87:76:88:d2:e4:7d:17:19:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 06:38:49 2026 GMT
Not After : May 28 06:43:49 2027 GMT
Subject: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:8d:2c:3f:44:df:b3:d1:34:e3:c4:2d:ba:
25:9b:88:6a:85:07:43:a4:80:e5:8e:e9:a1:26:a5:
56:8f:85:d4:c9:2a:2b:b3:f2:9f:ed:54:e0:2a:ad:
16:30:45:af:88:54:ed:10:af:ef:7b:a3:d5:5f:d5:
57:85:e1:d9:6b:01:d6:58:14:45:51:91:d3:50:5c:
2d:fa:08:93:ba:01:6d:d3:9a:c6:f4:f3:d3:c1:3d:
3d:1d:7a:f5:eb:49:ec:e3:39:dc:f0:61:03:2c:b8:
5f:f2:bf:fe:b5:2d:8e:af:f9:9c:b2:45:a9:cb:21:
34:6f:8d:ea:2c:84:68:a8:d9:98:1b:ed:a4:6f:8f:
c0:28:f5:c5:88:c1:f5:dc:aa:66:78:7b:68:92:4d:
e8:73:72:b7:ba:02:7c:64:a2:24:ad:f6:c2:3e:c5:
e9:30:e0:ca:f2:20:93:ad:f8:e3:73:ba:61:db:f9:
bf:5e:7f:91:2b:76:cd:ec:c5:96:d9:d2:3a:a1:f4:
08:cd:45:80:ff:c9:2f:18:f8:f5:60:87:c7:2a:d1:
c5:66:71:8e:7a:d1:86:6b:f0:d3:ad:63:25:75:38:
8e:0c:d4:fe:7f:43:7f:c3:0e:29:d5:cb:18:b0:97:
fb:c0:72:1d:59:24:b9:56:09:f5:23:b3:20:a9:a1:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.4.0/23
Signature Algorithm: sha256WithRSAEncryption
03:ee:01:60:a6:0a:6b:39:6e:c6:f4:24:a5:cf:66:13:c9:e9:
34:f5:46:38:07:31:d7:d6:c1:ee:b7:88:c9:15:e3:3e:8e:3a:
fa:17:3f:43:0a:bf:0f:ae:ff:1d:f5:93:59:6e:f2:6a:19:05:
ae:15:22:b7:72:9f:8e:9f:de:a6:f7:0f:ce:3a:b9:fe:8d:3f:
c5:22:c3:f4:20:4f:1f:a0:e9:68:ba:f7:22:ee:b7:dd:b5:88:
05:db:48:ab:30:16:f1:6b:0a:c6:a3:b3:54:9e:fd:a7:24:61:
75:bb:9f:75:7e:0a:3d:20:ae:6e:ff:6e:98:07:a3:fd:a4:19:
fe:b7:5f:23:94:f9:20:00:08:78:52:c4:23:05:75:62:24:4a:
1d:9a:22:bf:33:1c:ef:a9:fe:17:32:e9:a2:28:87:24:e2:34:
81:f6:83:84:71:77:b3:b2:0d:5f:75:00:8b:3d:be:18:16:b7:
25:0b:1c:b8:fd:26:fa:20:91:85:3a:fa:6e:77:8b:c0:0b:47:
16:1a:1e:bd:37:ac:db:b1:70:3f:e0:a6:2d:0b:0d:a6:e5:4a:
69:8d:21:d1:ab:2c:70:95:71:07:a5:b3:3a:5b:52:71:81:27:
0d:59:1e:f2:88:cd:14:e0:5b:6f:4d:64:5b:47:c2:d4:55:d5:
82:cc:05:c4
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUVAUW5ni4lrT8vGeHdojS5H0XGTgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2Mzg0OVoX
DTI3MDUyODA2NDM0OVowMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4
MkY2QjlBN0M1MjBFM0NDNTg4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALosjSw/RN+z0TTjxC26JZuIaoUHQ6SA5Y7poSalVo+F1MkqK7Pyn+1U4Cqt
FjBFr4hU7RCv73uj1V/VV4Xh2WsB1lgURVGR01BcLfoIk7oBbdOaxvTz08E9PR16
9etJ7OM53PBhAyy4X/K//rUtjq/5nLJFqcshNG+N6iyEaKjZmBvtpG+PwCj1xYjB
9dyqZnh7aJJN6HNyt7oCfGSiJK32wj7F6TDgyvIgk63443O6Ydv5v15/kSt2zezF
ltnSOqH0CM1FgP/JLxj49WCHxyrRxWZxjnrRhmvw061jJXU4jgzU/n9Df8MOKdXL
GLCX+8ByHVkkuVYJ9SOzIKmhbrsCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFMDCJZWykYSPv1aC9rmnxSDjzFiGMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU5MTY4MzA2MTY0NTMxNC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxNjQ1MzE0
LzAvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAFnugQwDQYJKoZIhvcNAQELBQADggEBAAPuAWCm
Cms5bsb0JKXPZhPJ6TT1RjgHMdfWwe63iMkV4z6OOvoXP0MKvw+u/x31k1lu8moZ
Ba4VIrdyn46f3qb3D846uf6NP8Uiw/QgTx+g6Wi69yLut921iAXbSKswFvFrCsaj
s1Se/ackYXW7n3V+Cj0grm7/bpgHo/2kGf63XyOU+SAACHhSxCMFdWIkSh2aIr8z
HO+p/hcy6aIohyTiNIH2g4Rxd7OyDV91AIs9vhgWtyULHLj9JvogkYU6+m53i8AL
RxYaHr03rNuxcD/gpi0LDablSmmNIdGrLHCVcQelszpbUnGBJw1ZHvKIzRTgW29N
ZFtHwtRV1YLMBcQ=
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:44 2026 by rpki-client